Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
File:                     F5SMh3nFnmXK_OLv3LHLUJEThEw.mft (raw, json)
Hash identifier:          cA7+orc2ti+AEEU1dH371DkGt+Gq4F5ikZQ/ya+/mLM=
Subject key identifier:   4C:8A:79:E1:EE:A6:35:F9:35:D4:84:48:1B:D7:28:87:06:64:CC:5B
Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C
Certificate issuer:       /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
Certificate serial:       063B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
Manifest number:          0636
Signing time:             Fri 26 Apr 2024 23:43:34 +0000
Manifest this update:     Fri 26 Apr 2024 23:43:33 +0000
Manifest next update:     Fri 03 May 2024 23:43:33 +0000
Files and hashes:         1: F5SMh3nFnmXK_OLv3LHLUJEThEw.crl (hash: fYopb8vOLpIpaWxAW1ovUd/pQnqa9iNFG+YXXIhlfXY=)
                          2: 7A75D42E45B211EB99335867C4F9AE02.roa (hash: aQDoH5QiAci9xehmNnFIBIEoksbeJWGzrKvt41Bzobw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl
                          rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 23:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1595 (0x63b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
        Validity
            Not Before: Apr 26 23:43:33 2024 GMT
            Not After : May  3 23:43:33 2024 GMT
        Subject: CN=662c3c25-3fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:de:ff:ee:e4:38:33:bb:03:d0:82:c4:31:
                    b9:cc:83:a7:f2:af:88:1d:3c:bf:46:7c:c7:71:ec:
                    35:b9:34:b5:f0:50:e4:1d:c6:a2:4b:80:51:d8:ed:
                    f8:11:b9:b6:5d:5a:5b:bc:b2:a7:50:34:71:70:9b:
                    d8:29:cd:d0:89:89:00:61:33:70:ed:cc:40:85:ff:
                    70:54:df:96:2d:c8:bb:af:ee:35:02:1a:3b:58:57:
                    20:c3:4f:d0:d9:7f:0a:62:b3:6c:41:3a:ba:37:ce:
                    72:89:9d:32:a3:b3:9c:2e:a4:13:a5:21:14:26:47:
                    1a:91:97:89:41:7d:d9:cc:5b:f2:42:48:80:1e:83:
                    00:95:0d:6f:58:30:29:14:f7:cb:f7:3b:2d:f5:70:
                    65:93:4f:16:83:33:10:20:07:a2:07:af:30:1e:0d:
                    b0:b4:ae:72:22:14:9d:70:70:6f:1e:2f:61:8c:cf:
                    de:7b:aa:b3:10:48:dc:c4:30:3c:04:5d:f6:98:6c:
                    7c:96:ac:cc:f5:49:ec:e6:2d:49:f7:7c:32:ef:07:
                    d4:60:ba:67:85:cc:28:e8:6d:d6:51:d3:46:a6:96:
                    6c:30:df:39:9b:ab:ab:4a:6a:19:bc:88:5b:41:2e:
                    62:ba:92:47:82:34:fe:7e:5a:80:24:9b:02:08:3d:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8A:79:E1:EE:A6:35:F9:35:D4:84:48:1B:D7:28:87:06:64:CC:5B
            X509v3 Authority Key Identifier:
                keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:fd:ca:db:6a:08:bc:a6:3b:c3:2a:1b:99:a3:e0:2f:c8:17:
         83:91:94:85:80:15:65:3f:3f:41:b7:81:80:0d:25:87:7f:48:
         a9:37:94:e2:67:78:68:8b:7b:3c:af:7c:fc:b9:d3:e8:7b:e2:
         4e:2e:ce:d6:3c:c0:dd:69:2a:55:87:00:0e:5a:56:ce:e4:e0:
         0a:f6:2b:63:f6:e6:b5:3b:18:50:8a:66:a1:dd:4c:7f:f4:8a:
         cb:cd:05:22:da:4e:84:87:2d:df:e8:4a:14:9c:8f:98:f3:55:
         f9:80:b2:09:5e:7d:04:90:2a:45:1f:6b:2c:83:a3:07:ab:a8:
         b0:b4:0d:00:1b:4e:67:19:ca:5c:c5:0d:9f:66:7f:bc:b4:83:
         bc:27:46:cb:4d:57:f0:84:43:4e:bd:0e:6d:c3:fe:31:c5:3e:
         e7:02:0a:12:98:58:54:2e:c7:35:ff:9f:80:fe:2c:58:19:5b:
         55:ec:7f:e5:85:20:4b:31:c9:0d:80:81:12:3c:8e:25:d9:91:
         bd:ce:b8:4a:ae:cf:58:5f:97:25:3f:91:8d:61:77:8d:0c:72:
         15:07:df:b2:35:7e:05:8b:ef:9e:5e:f7:4a:00:30:6f:27:fe:
         61:dc:f2:f5:de:6a:37:12:c8:8f:52:cf:cc:4a:5b:c3:4e:93:
         5b:b5:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:19:00 2024 by rpki-client on console-ams.rpki-client.org